Skip to content

SECURITY.md

Latest commit

 

History

History
21 lines (13 loc) · 790 Bytes

SECURITY.md

File metadata and controls

21 lines (13 loc) · 790 Bytes
Raw

Security policy

Supported version

Security fixes are applied to the current main branch.

Reporting a vulnerability

Use GitHub's private vulnerability reporting feature from the repository's Security tab. Do not open a public issue for a vulnerability that could cause unintended disk erasure, credential exposure, or installer-image tampering.

Include the affected script version, reproduction conditions, expected guard behavior, actual behavior, and any proposed mitigation. Remove private keys and passwords from every attachment.

Sensitive generated files

Never commit or publicly attach:

  • debian-unattended-credentials-*.txt
  • private SSH keys
  • customized initrd.gz files
  • built USB images
  • raw installer logs without reviewing identifying information